Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: kb4eVApqbC2OqIIJ5fj7gk6vCdw8vGZ4j8DPpcLiTuM=
Subject key identifier: 56:E4:06:7B:30:62:CF:44:C7:9D:88:15:BC:65:A6:B3:E4:EE:E8:2E
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019854FD40855D1A58EE1B322835AD62919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 07:02:19 +0000
Manifest this update: Tue 29 Jul 2025 07:02:19 +0000
Manifest next update: Wed 30 Jul 2025 07:02:19 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: IMRRixMj2EBnfroTT4QVPAernSCrVUCzw9e0McSxb8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fd:40:85:5d:1a:58:ee:1b:32:28:35:ad:62:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jul 29 07:02:19 2025 GMT
Not After : Jul 30 07:02:19 2025 GMT
Subject: CN=56e4067b3062cf44c79d8815bc65a6b3e4eee82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:48:11:f9:f5:b4:59:76:94:14:ea:de:c5:
3d:bd:a2:eb:ec:9c:9e:b4:e4:62:e1:1a:4c:36:99:
df:60:30:0c:ac:44:14:e4:09:4a:e8:20:12:b4:40:
15:1c:f9:15:d9:fb:ff:a1:e9:3f:cf:ee:ab:71:44:
fd:fc:75:97:38:63:20:ac:61:b2:82:f4:78:a4:87:
8b:47:3d:49:55:fa:38:77:e0:4a:33:e8:17:9c:90:
be:a7:05:d1:40:c1:e2:70:31:1e:49:7d:24:82:9a:
29:49:25:8a:72:1a:75:19:6e:ca:b8:73:91:43:36:
6d:d1:ca:95:34:e1:dc:6a:e5:3f:08:fb:86:12:54:
b9:46:2c:f1:99:f8:71:d1:01:dc:02:35:79:1f:eb:
6f:5b:90:d6:90:3f:bb:8c:ba:f2:62:d6:44:af:6e:
06:76:1b:e5:94:70:07:bf:da:7a:5f:d1:02:16:0c:
e5:80:12:90:9f:39:b9:6a:75:31:2d:27:14:b5:bc:
d3:d0:a7:e2:e9:d6:4f:48:39:57:dc:38:86:ff:d0:
80:7e:b2:aa:6f:52:c8:3d:08:0c:d8:1d:1b:55:f3:
15:58:d7:8e:45:f3:b0:92:3f:92:d3:16:f2:e0:16:
a3:82:52:de:ff:27:f4:56:33:d2:23:00:53:14:c5:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:06:7B:30:62:CF:44:C7:9D:88:15:BC:65:A6:B3:E4:EE:E8:2E
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:e2:c6:fc:f9:21:f8:a3:8f:d1:c6:cd:0d:73:b1:6d:6c:
ad:13:df:0b:db:a1:15:5b:65:1e:65:8a:c5:e5:c1:ca:9b:da:
bd:39:1d:7f:a8:09:c4:03:d2:f3:2c:3d:48:eb:36:0c:fa:c8:
fb:f5:4d:8c:11:cd:9c:00:4a:0e:5d:ba:01:9b:6b:0c:a4:89:
d6:77:6c:fe:c3:07:28:15:dd:65:e4:8d:bc:3a:19:65:5d:97:
72:b6:18:17:9f:0e:41:b5:e2:24:10:dc:88:ee:0b:17:70:01:
94:39:41:31:81:1d:dd:4f:3b:ca:e9:14:7d:9a:2a:bf:b8:04:
ca:ac:83:48:7e:73:6c:57:50:51:1c:58:e2:41:83:66:b8:33:
43:17:5f:81:22:7f:42:c4:73:ff:87:9f:ae:74:5a:c7:3a:4f:
b6:a6:b8:e5:96:2b:d8:33:01:58:79:b5:7e:65:44:d3:af:47:
13:98:3c:78:cf:6e:d2:d3:d4:db:59:74:8e:51:73:15:e5:6f:
07:32:72:26:ca:6c:cf:bd:3c:ff:c0:7a:9e:58:32:6f:a6:af:
72:e5:56:81:73:3c:d0:e4:8a:e7:74:f7:da:1f:d5:ed:a7:6c:
98:14:2e:ca:df:83:4a:9d:a0:48:c3:db:a7:3c:da:c4:46:bf:
16:be:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:13:32 2025 by rpki-client